Disable K.
|
Description:
|
Adware
|
|
Risk Level:
|
High
|
|
Date of First Occurence:
|
Tuesday, July 10, 2007
|
|
Software Developer:
|
(unknown)
|
|
Brief Info:
|
Disable K.- Software that is displaying pop-up/pop-under windows containing advertisements when the primary user interface is not visible or displayed advertisements are not related to the product.
|
|
Removal:
|
This threat can be removed using "Spyware
Terminator"
|
SUPPRIMER SPYWARE »
Geographical Distribution of Threat "Disable K."
Threat Info
View All
Detecting items list:
- Files by Name
%APPDATA%\viyjhai.dll
%sysdir%\alitvze.dll
%sysdir%\djpfutb.dll
%sysdir%\duoxthf.dll
%sysdir%\gniludj.dll
%sysdir%\jmudkve.dll
%sysdir%\ltfimlc.dll
%sysdir%\muvdko.dll
%sysdir%\nkejwol.dll
%sysdir%\oylrovm.dll
%sysdir%\rklcvvh.dll
%sysdir%\rmdrfje.dll
%sysdir%\viyjhai.dll
%sysdir%\vorenbj.dll
%sysdir%\hjvyqd.dll
%sysdir%\wtzlank.dll
- Files by CLSID or Name
CLSID=39962B19-8271-6BBD-8E5D-00ACC3CC13EC
CLSID=047E9E19-6E5A-D335-60B0-03D3D0EC4A6F
CLSID=5B20194F-C69E-833C-4552-02AB3E4088B2
CLSID=1A455575-0303-5FB1-8C9D-063B72D1B2B2
CLSID=7411F8BA-29A3-3216-9DE7-024AC0AAB9F6
CLSID=099D0986-C204-F967-3343-00A64FA96FB9
CLSID=4C73246C-B917-D8FD-CF5B-025CDD411BE8
- Registry Keys
HKCU\Software\AdwareDisableKey3
HKLM\SOFTWARE\AdwareDisableKey3
- Registry Values
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ValueName=wtzlank.dll
«
Go to Software Database